
$ rpki-client -vvf rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft
File: CNP7qN3CGMuzA5wDdh5qtwduT6I.mft (raw, json)
Hash identifier: AI5p4wAZFnoxeSlu/J6Agt55+c3LE1fJnYiPrSmIcmA=
Subject key identifier: C8:76:5B:65:17:AA:A9:57:80:C0:83:DD:9E:6B:1F:22:70:7A:4F:57
Authority key identifier: 08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2
Certificate issuer: /CN=A914C10B/serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2
Certificate serial: 06DD
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft
Manifest number: 06D4
Signing time: Sat 08 Aug 2026 21:57:31 +0000
Manifest this update: Sat 08 Aug 2026 21:57:31 +0000
Manifest next update: Sat 15 Aug 2026 21:57:31 +0000
Files and hashes: 1: CNP7qN3CGMuzA5wDdh5qtwduT6I.crl (hash: rP4XoojzTFuZNpjvhnGzBo6xvD8WzNqF77seyvjqYZs=)
2: CA16E952AF6411EB95CDDD18C4F9AE02.roa (hash: 3xq5p3AVGt409aSIRk2oci21u6gbUU5aFa+YoaSFvTs=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl
rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 15 Aug 2026 21:57:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1757 (0x6dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A914C10B, serialNumber=08D3FBA8DDC218CBB3039C03761E6AB7076E4FA2
Validity
Not Before: Aug 8 21:57:31 2026 GMT
Not After : Aug 15 21:57:31 2026 GMT
Subject: CN=6a77a64b-8635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0e:8e:8e:57:4c:7a:e8:13:21:51:a0:03:67:
9b:6f:bb:c2:24:c9:5a:87:e7:41:6c:1e:b6:ec:a9:
1b:2a:69:9d:88:7a:d0:08:34:12:cd:e0:75:09:40:
7e:0f:93:ed:fe:06:00:d0:f2:04:73:61:70:d5:18:
c6:ab:24:3c:0e:3d:c0:55:ad:4d:c9:68:2a:4d:42:
f2:96:07:44:26:cf:ba:43:1f:c3:d4:f4:9a:28:10:
c3:eb:b0:81:2f:e5:a4:ff:b5:33:0a:af:5a:ff:7e:
2e:96:f0:3c:48:ec:45:66:25:63:08:87:98:a8:5b:
b0:f8:c1:b6:80:ce:b2:17:ed:bf:9e:63:0d:e1:94:
2f:dd:db:ef:aa:fa:99:62:ef:6e:91:c5:26:bd:fd:
9a:bf:73:35:01:7c:65:27:1d:2a:ea:2d:40:5f:de:
d7:54:15:a9:c0:8a:1e:50:23:de:8b:0a:32:54:d9:
62:a8:96:a7:70:cb:87:5d:a8:b9:e2:e0:9c:ab:8d:
4d:dc:03:0e:ba:fb:33:21:ad:f0:30:57:d2:d7:df:
5d:64:70:71:08:cb:26:a3:1d:3c:55:5d:ee:ef:d9:
66:e6:80:8f:32:5c:dd:24:57:fe:c9:ba:e4:75:cd:
8d:61:52:51:95:5e:da:4d:55:58:8d:08:12:6c:07:
6e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:76:5B:65:17:AA:A9:57:80:C0:83:DD:9E:6B:1F:22:70:7A:4F:57
X509v3 Authority Key Identifier:
keyid:08:D3:FB:A8:DD:C2:18:CB:B3:03:9C:03:76:1E:6A:B7:07:6E:4F:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CNP7qN3CGMuzA5wDdh5qtwduT6I.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C10B/7B6CA122AF6211EB8BA1F714C4F9AE02/CNP7qN3CGMuzA5wDdh5qtwduT6I.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
03:6a:34:49:33:cb:1b:49:0c:ae:76:60:47:aa:94:9a:73:0a:
38:b9:96:f2:41:f4:b5:39:e5:6d:32:80:22:18:39:a4:a3:d0:
88:50:22:0a:21:41:96:cc:b8:71:3c:86:d7:b8:b4:21:37:09:
a5:21:0b:85:2f:09:12:b4:e4:c8:3f:30:dc:7f:91:82:a1:50:
04:ab:64:86:4e:9a:69:88:f5:1d:59:9a:0b:4d:07:d4:91:07:
da:f0:4a:0d:17:8b:d9:3b:0d:a9:95:a5:ac:3d:47:04:1a:0f:
fb:d1:23:a7:5f:b0:03:a8:17:0c:0c:a6:d7:de:96:5d:89:48:
6a:2e:fc:8c:fd:bd:12:6e:27:ed:88:2a:c2:7d:19:34:6b:84:
ff:d7:66:4a:40:7e:d3:e7:4a:5d:c5:f5:f4:77:aa:a4:d7:2d:
13:99:ec:8e:58:51:c4:7c:2b:b8:34:f4:1f:6c:12:ce:7b:e7:
27:44:71:8b:f6:80:cc:76:ab:9b:4f:c1:55:b5:4c:67:4c:ee:
69:43:3f:27:75:e5:21:8e:73:4e:1a:b6:bd:e9:8f:b5:ca:ef:
1f:be:51:63:dc:3f:3a:64:66:8b:00:54:e1:1c:d5:24:9a:39:
5c:76:2e:30:34:fd:12:f2:26:7d:7e:13:05:1e:5a:54:32:26:
71:f0:fb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 10 13:43:53 2026 by rpki-client